Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: aJ5p85zu0h9y3xLC2pbcLozJjEB0zyVq11X9+u969tQ=
Subject key identifier: 4C:FC:A2:45:D7:BA:12:7E:C8:D0:0A:21:79:76:7A:2E:4E:8D:E7:A2
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 0196AF8DD9670D1DD3A0FE7696A5E18D039B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 126D
Signing time: Thu 08 May 2025 11:00:30 +0000
Manifest this update: Thu 08 May 2025 11:00:30 +0000
Manifest next update: Fri 09 May 2025 11:00:30 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: 1CVmpd7xNJPHrpLD4VjDLNseU3C8qF9U3mJu81z4+LM=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:d9:67:0d:1d:d3:a0:fe:76:96:a5:e1:8d:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: May 8 11:00:30 2025 GMT
Not After : May 9 11:00:30 2025 GMT
Subject: CN=4cfca245d7ba127ec8d00a2179767a2e4e8de7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:76:b4:1a:95:e1:1f:78:86:9f:b9:95:2b:
f4:35:b5:af:64:b2:66:39:6f:50:06:dd:3c:58:02:
61:93:4d:24:7e:e5:63:9b:c3:fb:a7:57:1d:d0:03:
05:40:e1:ba:71:b9:8d:d8:b9:20:33:4f:f2:35:29:
79:fe:9b:f5:ca:83:d5:73:95:5b:8d:be:07:e0:bb:
ee:93:48:6a:61:20:b8:34:56:54:d6:b9:00:ad:2d:
54:f6:bb:e5:ac:39:52:c7:60:0c:ce:d7:ed:c4:f6:
57:e4:31:33:6f:31:a2:2c:89:8d:4f:0a:1f:d2:f5:
18:fe:6c:97:b6:93:83:b0:dc:52:82:14:1c:e8:74:
22:96:bf:65:ee:27:c3:ea:40:4a:e2:3c:07:21:2a:
c7:bc:d3:43:ce:7e:15:3d:fb:b1:04:b8:07:72:8d:
da:8c:61:64:b2:15:d3:51:86:62:d3:00:b5:99:46:
10:b6:d8:e1:63:9d:5d:b9:a2:4d:17:c5:76:79:a6:
54:63:9a:5e:1c:af:76:d3:b9:b4:06:8c:25:ec:97:
f1:61:74:ea:6e:2b:81:c3:f9:4c:b1:15:69:3b:94:
99:b2:8f:f1:9b:8b:64:d0:60:4d:50:6e:54:82:1c:
d1:5f:67:1a:4a:e4:36:5f:d4:9c:33:4d:fd:c2:57:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:A2:45:D7:BA:12:7E:C8:D0:0A:21:79:76:7A:2E:4E:8D:E7:A2
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:14:1b:c3:35:ba:0c:25:73:81:6c:09:a1:3a:e8:17:cf:
4f:26:c5:c8:3b:17:ee:ff:97:c7:ff:54:48:16:1a:5e:52:3c:
da:b0:cc:dd:c0:17:d2:33:6b:8a:e2:83:b4:4a:f4:2c:fe:3a:
4c:25:7b:75:e6:c6:6a:4f:c2:08:6f:e3:af:6d:a2:3e:67:1b:
66:43:3e:39:0b:df:51:08:9a:03:5f:bf:95:a4:1a:90:df:5c:
0c:ae:c9:5e:68:34:b8:d8:18:8b:ba:f9:b7:e4:29:b8:a5:61:
c1:3c:10:f8:e3:c2:54:a1:cc:58:86:8b:3e:1c:2f:58:fd:ad:
e2:eb:68:e1:6a:4f:d4:7d:17:f1:a8:c8:76:9a:e4:28:50:0f:
62:5e:18:f5:da:b1:1c:4d:24:5a:7e:14:c5:e0:47:48:1b:36:
5b:01:c2:81:5d:35:73:ad:e6:bc:64:5d:a7:53:d2:a1:a9:46:
7c:ae:f9:d0:74:9e:f6:83:ad:01:7b:5b:26:b7:84:a9:14:2b:
bf:cb:fb:3c:66:9a:1d:37:a4:88:2f:10:db:1e:13:ed:7e:4c:
51:3a:36:1b:e4:03:08:30:8e:65:6b:79:ad:39:de:8c:c1:96:
87:1e:41:3e:70:e9:0c:6c:3e:b1:de:fd:4e:48:e4:ca:13:71:
6d:c7:53:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavjdlnDR3ToP52lqXhjQObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkY2FjOTllN2NhMTVkMGM5OTA0MjBlZTMxNmQ5YWFiODRj
Yzg0N2YwHhcNMjUwNTA4MTEwMDMwWhcNMjUwNTA5MTEwMDMwWjAzMTEwLwYDVQQD
Eyg0Y2ZjYTI0NWQ3YmExMjdlYzhkMDBhMjE3OTc2N2EyZTRlOGRlN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7h2tBqV4R94hp+5lSv0NbWvZLJm
OW9QBt08WAJhk00kfuVjm8P7p1cd0AMFQOG6cbmN2LkgM0/yNSl5/pv1yoPVc5Vb
jb4H4Lvuk0hqYSC4NFZU1rkArS1U9rvlrDlSx2AMztftxPZX5DEzbzGiLImNTwof
0vUY/myXtpODsNxSghQc6HQilr9l7ifD6kBK4jwHISrHvNNDzn4VPfuxBLgHco3a
jGFkshXTUYZi0wC1mUYQttjhY51duaJNF8V2eaZUY5peHK9207m0Bowl7JfxYXTq
biuBw/lMsRVpO5SZso/xm4tk0GBNUG5UghzRX2caSuQ2X9ScM039wleQiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz8okXXuhJ+yNAKIXl2ei5OjeeiMB8GA1UdIwQY
MBaAFB3KyZ58oV0MmQQg7jFtmquEzIR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNySm5ueWhYUXlaQkNEdU1XMmFxNFRNaEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85YTVkNGQtMTYyYS00YzA5LWE0N2Et
OTJiNWUyNWQyNDdiLzEvSGNySm5ueWhYUXlaQkNEdU1XMmFxNFRNaEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS85YTVkNGQtMTYyYS00YzA5LWE0N2EtOTJiNWUyNWQyNDdi
LzEvSGNySm5ueWhYUXlaQkNEdU1XMmFxNFRNaEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPsUG8M1
ugwlc4FsCaE66BfPTybFyDsX7v+Xx/9USBYaXlI82rDM3cAX0jNriuKDtEr0LP46
TCV7debGak/CCG/jr22iPmcbZkM+OQvfUQiaA1+/laQakN9cDK7JXmg0uNgYi7r5
t+QpuKVhwTwQ+OPCVKHMWIaLPhwvWP2t4uto4WpP1H0X8ajIdprkKFAPYl4Y9dqx
HE0kWn4UxeBHSBs2WwHCgV01c63mvGRdp1PSoalGfK750HSe9oOtAXtbJreEqRQr
v8v7PGaaHTekiC8Q2x4T7X5MUTo2G+QDCDCOZWt5rTnejMGWhx5BPnDpDGw+sd79
TkjkyhNxbcdT7g==
-----END CERTIFICATE-----
Generated at Thu May 8 21:11:55 2025 by rpki-client